[j-nsp] v6-in-v4 tunnels without tunnel PIC?

Joe Abley jabley at isc.org
Thu Sep 23 21:17:12 EDT 2004


On 23 Sep 2004, at 19:37, Phil Rosenthal wrote:

> interfaces {
>     ipip {
>         unit 101 {
>             description "IPv6 Tunnel to (blah)";
>             tunnel {
>                 source 1.2.3.4;
>                 destination 5.6.7.8;
>             }
>             family inet6 {
>                 address 2001:d00d:b00b::babe/126;
>             }
>         }
>     }
> }
>
> Requires no tunnel services card -- I have no idea of the performance 
> characteristics of this, I have been unable to accurately test.

I tried this out.

It looks very much to me like this works in as far as you can reach the 
RE at the other end of the tunnel, and it responds to pings as you'd 
expect. I have not been able to convince a packet sent down the tunnel 
towards an "ipip" termination to continue out a real interface, though.

It seems likely/possible that this is an architectural problem, and the 
solution to it is "buy a tunnel PIC".


Joe



More information about the juniper-nsp mailing list